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Anonymizing Networks 


Prefer 


I2P 
000o ee , 
12P 252: The invisible internet project. 
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Orbot 

¢ The features and functionality of Tor for Android. 
Android 
Tor 

Fór Free software for enabling online anonymity. Tor directs Internet traffic through a free, worldwide, vo... 
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App Store 


Prefer 
jo of F-Droid 


2) Free software repository for Android. 
Android 


Avoid | x | 


amazon ` 


Amazon Appstore 


B Google Play 


Authentication 


Prefer 


Aegis Authenticator 
IN A free, secure and open source app for Android to manage your 2-step verification tokens. 
Android 


andOTP 
Two-factor authenticator for Android. 
Android 


Tofu 
Two-factor authenticator for iOS. 
iOS 


Bookmark Sync 


Prefer 
Shaarli 
Spoacn The personal, minimalist, super-fast, database free, bookmarking service. 
‘Experimental Android iOS Servers 
pv 4 wallabag 


WwW wallabag is a self hostable application for saving web pages. Unlike other services, wallabag is free ... 
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Avoid 


] Instapaper 


Pocket 


Collaboration 


Prefer 


Cryptpad 
Real-time collaborative docs, polls, todos. 
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Gitea 
Painless GitHub-like Git forge. 


Servers 


GitLab 


Complete Git forge suite. 


Servers 


Loomio 
Web application that helps groups of people to make decisions together. 
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Prefer 


Avoid 


dnscrypt-proxy 
Encrypted DNS proxy. 
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Namecoin 
Distributed DNS for .bit TLD. 
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nsupdate.info 
Dynamic DNS service. 
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G Google Public DNS 


OpenDNS 


Email 


Prefer 


RiSEUP 


Notes 


For more email providers, take a look at Privacy-Conscious Email Services. Please decide for 
yourself whether if you trust them with your data. For more discussion about safe email 


K-9 Mail 
Email client for Android with OpenKeychain support. 
Android 


Kolab Now 
Kolab accounts hosted in Switzerland. 


Web Services 


Mail-in-a-Box 
Email server installer and manager. 


Servers 


Riseup 


Secure communication tools for people working on liberatory social change. 


Web Services 


Thunderbird 


Extensible, cross-platform email client. 
BSD GNU/Linux macOS Windows 


providers, please see issue #461. 


Kolab Now is hosted in Switzerland and benefits from the strong Swiss privacy laws. It is run 


exclusively with free software and using the service supports the development of Kolab. Also, it 


lets you export all your data at any time. 


Riseup’s services may also be accessed via their Tor Hidden Service addresses. A list is 
available here. 


Why not Hushmail? See ‘compromises to email privacy’a>. 


If you have the technical aptitude, consider running your own mail server. 


Avoid 


M Gmail 

© GroupWise 

{jf BM Notes 

ga Microsoft Exchange 
oğ Microsoft Outlook 
bd Yahoo Mail 
x 


Yandex.Mail 


Email Addons 


Enigmail 
OpenPGP add-on for Thunderbird. 
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Mailvelope 
OpenPGP browser add-on for webmail. 
BSD GNU/Linux macOS Windows 


OpenKeychain 
OpenPGP app for Android. 


(AUGER) Android 


TorBirdy 
Tor add-on for Thunderbird. 
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Notes 


“Pretty Good Privacy (PGP) is a data encryption and decryption computer program that provides 
cryptographic privacy and authentication for data communication. PGP is often used for signing, 
encrypting and decrypting texts, e-mails, files, directories and whole disk partitions to increase 
the security of e-mail communications.” 


— Wikipedia 


PRISM Break does not recommended S/MIME email encryption because of its reliance on third- 
party certificates from central authorities. Read more here. 


OpenKeychain together with K-9 Mail provides end-to-end email encryption. An experimental 
project is GnuPG for Android by the Guardian Project. 


Read the Email Self-Defense guide by the Free Software Foundation to learn how to encrypt 
your email messages. 


Enterprise Suite 


Prefer 


Nextcloud 
A safe home for all your data 
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- Sandstorm 
Sandboxed platform for self-hosting web apps. 
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Notes 


The enterprise suite category is for solutions for organizations that cover more than 10 
categories in an integrated fashion (ex.: logins work throughout all apps, etc.) 


Avoid | x | 


aA Zoho Office Suite 


File Sharing 
Prefer 
LN OnionShare 


Anonymous file transfer via Tor. 
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Up1 
Client-side encrypted image host web server. 
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D G 


File Storage & Sync 


Borg 
Compressing, deduplicating backup tool. 
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EteSync 
Encrypted calendar, contacts and tasks sync. 
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git-annex 
Git-driven file management and version control. 
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Git 
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Sia 
Decentralized cloud storage. 


Experimental GNU/Linux macOS Windows 


Syncthing 


Direct file sync between devices. 
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Tahoe-LAFS 
Distributed least authority file store. 


Servers 


het @ (C0 


This section has been carefully curated to only include software that encrypts data on the client. 
That means your data should be secure even if servers it’s stored on are compromised. 


Avoid | x | 


3 Dropbox 
Q Google Drive 


@& iCloud 


da Microsoft OneDrive 


©& Yandex.Disk 


Finance 


Prefer 
Bisq 

Decentralized Bitcoin exchange. 
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Monero 
Fungible, untraceable cryptocurrency. 
Android BSD GNU/Linux iOS macOS Windows 


Firmware 


Prefer 


OpenBSD 
A secure BSD operating system. 
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OpenWrt 
A GNU/Linux distribution for embedded devices. 


Routers 


Notes 


libre CMC is an FSF-endorsed derivation of OpenWrt with the proprietary blobs removed. If your 
device is supported by libreCMC, definitely use it over OpenWrt. 


Instant Messaging 


Prefer 


Aenigma 
Secure-by-default XMPP server installer. 


Servers 
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Peer-to-peer messaging app. 
Android 


ChatSecure 


XMPP client for iOS. 
iOS 


Conversations 
XMPP client for Android. 
Android 


Dino 


Modern XMPP client for GNOME. 
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Psi 
Cross-platform XMPP client. 


macOS Windows 


RetroShare 


Peer-to-peer communication and file sharing app. 
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Signal 


Metadata-resistant, user-friendly messenger with audio/video calls (mobile only). 
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Silence 
SMS app with end-to-end encryption. 
Android 
Avoid 
Discord 


Facebook Messenger 
Google Hangouts 
LINE 

Skype 

Snapchat 


Telegram 


Tencent QQ 
Viber Messenger 


WeChat 


O 9H 


WhatsApp 


Media Publishing 


Prefer 


PageKite 
Localhost tunneling service. 
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PeerTube 
Federated video hosting. 
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PixelFed 
Federated image sharing. 
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WriteFreely 
Federated blog platform. 
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flickr Flickr 
Imgur 
Instagram 
Medium 
Tumblr 


Vimeo 


0 < eae Bog 


YouTube 


Mesh Networks 


Prefer 


Cjdns 
cjdns A networking protocol, a system of digital rules for message exchange between computers. “Instead... 
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Freifunk 
A non-commercial open grassroots initiative to support free radio networks around the world. 
Routers 
guifi.net 

guifi-net Open, free and neutral wireless network for everyone. 
Routers 
tinc 

e 
tinc Free software daemon that uses tunnelling and encryption to create a secure private network 
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Notes 


A mesh network is a decentralized peer-to-peer network, with user-controlled physical links that 
are usually wireless. 


“Mesh networking (topology) is a type of networking where each node must not only capture and 
disseminate its own data, but also serve as a relay for other nodes, that is, it must collaborate to 
propagate the data in the network.” 


— Wikipedia 
News 
Prefer 
Tiny Tiny RSS 
RSS feed reader. 
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Avoid | x | 


Google News 


Operating Systems 


Prefer 


aipa CentOS 
u” RHEL-compatible enterprise computing platform. 


Servers 


Debian 
Popular ethical GNU/Linux distribution. 
GNU/Linux macOS Servers Windows 


Fedora 
Fast, stable and powerful GNU/Linux distribution. 
GNU/Linux macOS Windows 


FreeBSD 


A free BSD-derived operating system. 
BSD macOS Servers Windows 


FreedomBox 
Privacy protection on a cheap plug server so everybody can have privacy. 


Servers 


OpenBSD 
A secure BSD operating system. 
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Qubes 


Fedora/Xen-based OS designed to provide strong security through isolation. 
GNU/Linux macOS Windows 


OOox €O 


Apple, Google, and Microsoft are allegedly a part of PRISM. Their proprietary operating systems 
cannot be trusted to safeguard your personal information from the NSA. We have two free 
alternatives: GNU/Linux and BSD. 


GNU/Linux has a much larger community to help you with the transition. Its recommended that 
you begin your explorations by looking for a GNU/Linux distribution that suits your needs. 
Additionally the Free Software Foundation hosts a list of completely Free distributions. 


Debian has a long tradition of software freedom. Contributors have to sign a social contract and 
adhere to the ethical manifesto. Strict inclusion guidelines make sure that only certified open 
source software gets packaged in the main repositories. 


Fedora is a community edition that serve as the stable basis for enterprise ready GNU/Linux 
distributions with commercial support. Companies all over the world trust Red Hat Inc. because 
of their transparency throughout the whole development process. 


Canonical’s Ubuntu is not recommended by PRISM Break because it contains Amazon ads and 
data leaks by default. GNU/Linux distributions based on Ubuntu are also currently not 
recommended due to several other reasons. 


Avoid | x | 


‘as) macOS 


= Windows 


Operating Systems (Live) 


Prefer 


Tails 


Q Live OS aimed at preserving your privacy and anonymity. 
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_ 


Whonix 


©) VM-friendly OS based on Debian and Tor focused on anonymity, privacy and security. 
GNU/Linux macOS Windows 


Notes 


A live distribution like Tails is the fastest and easiest way to a secure operating system. All you 
have to do is create a bootable CD or USB drive with the files provided and you're set. 
Everything else will be preconfigured for you. 


A virtual machine (VM) image like Whonix is designed to be run inside of a virtualization 
package like VirtualBox. VirtualBox can be installed on Windows, Linux, macOS, and Solaris. 
This means that if you’re stuck using Windows or macOS for whatever reason, you can install 
VirtualBox and use Whonix to increase your privacy and security. 


Password Managers 


Prefer 


© KeePass DX 
N KeePass manager for Android. 


Android 


KeePassXC 


KeePass manager for desktop. 
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eee| LastPass 


Co) Roboform 
— 


Productivity 


Prefer 


EtherCalc 


Multi-user spreadsheet server. 
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Riseup 


RiSEUP 


Web Services 


Notes 


Riseup also offers email, XMPP, chat and data hosting (via Up1) services, all of which are 


Secure communication tools for people working on liberatory social change. 


accessible through Tor Hidden Service addresses. The list of these addresses is available here. 


Avoid 


Doodle 

Evernote 

Google Docs 
GroupWise 

iWork 

Microsoft Outlook 


Zoho Docs 


NR pp OorBA 


Social Networks 


Prefer 


diaspora* 
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friendica 
Distributed, federated social network. 


Servers 


D N Hubzilla 


Community-run, distributed social network. 


Platform for creating interconnected websites. 


Servers Web Services 


Mastodon 
Federated microblogging social network. 


Servers Web Services 


Movim 
Private, decentralized social network server. 


Servers Web Services 


pump.io 
Self-hosted social stream server. 


Servers 


RetroShare 


Peer-to-peer communication and file sharing app. 
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If you have system administration knowledge, please strongly consider running an instance of 
pump.io (or something else) for your friends, family, or favorite community. Many of them would 


be willing and grateful to escape Facebook if you provide them a way out. 


For those of you without your own server, RetroShare is the easiest way to start your own 


encrypted social network. 


Video & Voice 


Prefer 


(TU) 


Jami 


Decentralized audio/video call app. 
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Mumble 


q BLE} } Low-latency multi-user voice chat. 
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, Signal 


h Metadata-resistant, user-friendly messenger with audio/video calls (mobile only). 
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Q TeamSpeak 


w Ventrilo 


VPN 


Prefer 


Bitmask 
LEAP platform client. 


A ‘Experimental Android GNU/Linux macOS 


Mullvad 
No-log WireGuard VPN provider. 


Web Services 


Riseup 
Secure communication tools for people working on liberatory social change. 


RiSEUP 


Web Services 


WireGuard 


Fast, modern, secure VPN tunnel. 
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Avoid 


luis Cisco VPN 


a Hola! 


Web Browser Addons 


Decentraleyes 
Protects you against tracking through “free”, centralized, content delivery. It prevents a lot of request... 
Android BSD GNU/Linux macOS Windows 


HTTPS Everywhere 


Encrypts your communications from thousands of websites by enforcing HTTPS everywhere. 
Android BSD GNU/Linux macOS Windows 


Mailvelope 
OpenPGP browser add-on for webmail. 


BSD GNU/Linux macOS Windows 


Multi-Account Containers 
Manual identity isolation for Firefox. 
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NoScript 
Only enable JavaScript, Java, and Flash for sites you trust. 
Android BSD GNU/Linux macOS Windows 


Privacy Badger 


Tracking blocker that tries to learn who is spying on you and then blocks these ads and invisible trac... 


OH OO! 
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Temporary Containers 
Per-tab identity isolation for Firefox. 
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© 


uBlock Origin 
An efficient blocker for Firefox and Chromium. Fast and lean. 
Android BSD GNU/Linux macOS Windows 
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Installing your own add-ons into Tor Browser is not recommended, as they may bypass Tor or 
otherwise harm your anonymity and privacy. Check the EFF’s Panopticlick to see how trackable 
your browser configuration is by third parties. 


If you're using a Firefox-based browser, you can safeguard your browsing habits and stop 
advertising companies from tracking you by installing uBlock Origin, Request Policy, and 
HTTPS Everywhere. 


Install NoScript and enable ‘Forbid scripts globally’ to improve the security of your browser by 
preventing 0-day JavaScript attacks. This is a drastic option as it will render many websites 
unusable as they rely heavily on JavaScript. NoScript offers a whitelist you can use to selectively 
enable JavaScript for sites you trust, but this is considered especially bad for your anonymity if 


you’re using NoScript with Tor Browser. 


Why is Adblock Plus not recommended? Adblock Plus shows “acceptable ads” by default, which 
works against the purpose of the add-on. Either disable acceptable ads or use uBlock Origin 
instead. 


Avoid | x | 


Web Browsers 


Prefer 


Fennec F-Droid 
Firefox for Android without trackers. 
Android 


Firefox 
Fast, flexible and secure web browser with a vibrant add-on ecosystem. 
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Onion Browser 
Surf the web through the Tor network with this open source browser for iOS. 
ios 


Tor Browser 


Encrypted, anonymous web browsing powered by the Tor network. 


Android BSD GNU/Linux macOS Windows 


Notes 


Try to use Tor Browser for all of your web surfing. It will offer you far better anonymity than any 
other browser. Make sure to learn the basics of Tor before using it. If the site you want to visit will 
not work in Tor Browser, try Firefox intead, but realize these browsers do not anonymize your ip 
by default. 


Tor Browser notes: Using Tor Browser to sign into websites that contain your real ID is 
counterproductive, and may trip the site’s fraud protection. Make sure to check for HTTPS before 
signing in to a website through Tor. Signing into HTTP websites can result in your ID being 
captured by a Tor exit node. 


Firefox notes: This browser uses Google search by default: replace it with a more private 
alternative. 


Why are Chromium, SRWare Iron, et al. not recommended on PRISM Break? More info here. 


Warning for mobile devices & Tor: Websites using HTML5 <video> tags will leak <video>- 


related DNS queries and data transfer outside of Tor. 


Avoid 


o Google Chrome 
a Microsoft Edge 
O Opera 
@® safari 


Y Yandex.Browser 


Web Search 


Prefer 


DuckDuckGo 


Independent no-tracking search engine. 


Non-free Web Services 


(3 
oe 


Metasearch engine. 
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Notes 


DuckDuckGo is a software-as-a-service (SaaS) hosted around the world that provides you with 


anonymous search results from these sources. DDG open source components are available 
here. 


There is also a DuckDuckGo hidden service at 3g2upl4pq6kufc4m.onion for Tor users. 


MetaGer is a SaaS by the German non-profit SUMA e.V. that provides you with anonymous meta 
search results. 


Avoid 


G Google Search 


b Microsoft Bing 
YI Yahoo Search 


y Yandex 


World Maps 


Prefer 


OpenStreetMap 

Free, collaborative world wide map. 
Web Services 

OsmAnd 

Map and navigation app that uses OpenStreetMap data. 
Android iOS 


Notes 


“If you spend time contributing to OpenStreetMap you are helping a good cause, and building a 
geographic database of the world which is free and open for all and forever.” 


— OpenStreetMap Wiki 


Avoid | x | 


A Apple Maps 
b Bing Maps 
~ Google Earth 


Ad Google Maps 
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